Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e1b74eb9-6b13-3b68-98b5-dbf1df068ea6.roa
File:                     e1b74eb9-6b13-3b68-98b5-dbf1df068ea6.roa (raw, json)
Hash identifier:          0ZZityVKWvt1c1/EdlUS7SKPNiSSfTWsGl/hfJUhQRY=
Subject key identifier:   53:9A:6D:9D:0A:F2:91:B3:13:7B:56:79:56:B6:74:68:7F:7B:7A:AB
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F225D22F98747BD1D804AA680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e1b74eb9-6b13-3b68-98b5-dbf1df068ea6.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        192.9.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:22:f9:87:47:bd:1d:80:4a:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=80009c44-dd3d-48fd-99e6-9e6df135ce90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:eb:4e:3e:30:85:0f:12:14:74:f2:2a:d6:
                    82:86:1e:a9:de:20:c7:cf:e9:d3:f1:14:09:31:b9:
                    09:ab:a6:8b:58:ae:7f:e4:51:f8:66:df:de:29:22:
                    9d:9d:95:3a:78:5b:85:32:b5:db:63:2f:e9:b4:dc:
                    c2:fd:bf:90:1c:46:b6:b3:c5:38:46:f7:55:07:a4:
                    11:b5:02:91:01:5f:79:3d:4e:67:4d:97:67:b3:59:
                    68:95:1d:f7:5b:25:84:fd:be:1c:a3:93:d0:63:5b:
                    bf:8c:e1:d6:aa:71:d2:c2:db:41:88:9e:c4:94:9f:
                    ef:84:07:e1:e9:12:6e:98:92:f1:4a:24:67:ec:97:
                    7e:97:f0:4a:50:da:66:1b:09:ac:4c:7a:17:de:e5:
                    c5:0e:c3:c5:6c:01:8f:e9:97:4f:08:7d:a7:a5:7a:
                    64:33:b7:ee:cd:82:7c:8a:14:a6:5a:fb:eb:fb:40:
                    11:31:a1:09:4b:ec:e2:70:f1:6b:ee:8b:de:5e:34:
                    a2:34:d1:9d:2d:56:3d:e8:79:98:b9:d5:06:6a:9a:
                    93:0e:18:00:08:86:66:15:46:a0:c4:c8:06:71:7f:
                    b4:9c:17:27:a5:98:b5:85:bd:50:a0:02:2a:36:26:
                    48:54:19:0e:44:a8:1b:30:13:b4:c3:e5:63:c3:a3:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:6D:9D:0A:F2:91:B3:13:7B:56:79:56:B6:74:68:7F:7B:7A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e1b74eb9-6b13-3b68-98b5-dbf1df068ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.9.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:05:73:14:84:ff:de:b1:96:67:ea:95:cf:ef:b8:79:a8:28:
         5d:8e:16:9f:40:4f:68:a3:7e:25:b7:cb:e1:d8:7f:48:e6:97:
         c2:b6:be:4b:f9:d1:3b:dd:10:4c:e2:0e:74:54:42:5b:95:1f:
         9b:40:a5:18:26:6d:cd:01:ea:db:a5:8f:f1:01:6e:2c:2c:46:
         dd:a8:6d:e4:17:91:70:b0:90:75:1e:c0:7f:e0:9d:ff:2d:5a:
         e2:7d:3a:61:7c:58:4d:e3:2a:ce:4f:76:78:72:35:f5:96:6c:
         95:0f:c3:1b:86:55:c3:50:b7:1e:75:a2:b2:3f:44:cb:e2:00:
         85:0a:b8:22:66:b5:6d:1a:7a:64:f6:5a:de:6c:89:86:34:10:
         7a:67:36:9f:65:bc:5f:86:57:99:a0:ea:ad:aa:bf:c6:ec:53:
         4b:11:1c:27:8a:0b:86:41:2d:02:f7:b8:52:f1:6e:62:38:85:
         fb:d2:de:a3:20:3e:3a:6b:0f:30:34:99:b3:fa:e1:71:64:27:
         fd:50:26:5c:90:3e:37:e2:ba:8b:b6:c3:0b:db:79:f6:13:2e:
         85:bf:c6:92:a0:31:34:59:cb:9c:a6:8d:04:f8:ed:49:c1:9d:
         33:8f:03:33:b9:50:e7:9e:2c:d6:43:c2:7c:13:82:8b:e5:61:
         8b:64:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:49 2026 by rpki-client